lock down permission per GitHub alert.

taeold · taeold · commit 9ee469ea9660 · 2025-11-04T09:12:53.000-08:00
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -4,6 +4,9 @@ on:
   - pull_request
   - push
 
+permissions:
+  contents: read
+
 env:
   CI: true
 
